ARAP-Security-Data

[AG]

Hi All,

I am new to this group. Recently I have installed freeradius (0.9.3). I 
have changed users and client.conf and everything  else is default.

#### clients.conf#######
client ip_addr_masked {
   secret = xxx        #same secret the client uses
   shortname = web-client
   login=xyz
   passwd=xyz123
}
####users########
xyz  Auth-Type := Local, User-Password == "xyz123"
#########OUTPUT####################

Here is what I get (radiusd -xxyz),

--------------------<radiusd DEBUG MODE>------------------------
rad_recv: Access-Request packet from host <ip_addr_masked>:3745, 
id=252, length=65
Thread 2 assigned request 1
--- Walking the entire request list ---
Threads: total/active/spare threads = 5/1/4
Waking up in 5 seconds...
Thread 2 handling request 1, (1 handled so far)
        NAS-Identifier = "localhost"
        User-Name = "xyz"
        User-Password = "xyz123"
        Login-LAT-Node = "eDiylJbp"
modcall: entering group authorize for request 1
  modcall[authorize]: module "preprocess" returns ok for request 1
  modcall[authorize]: module "chap" returns noop for request 1
  modcall[authorize]: module "eap" returns noop for request 1
    rlm_realm: No '@' in User-Name = "xyz", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 1
    users: Matched jobs at 90
  modcall[authorize]: module "files" returns ok for request 1
  modcall[authorize]: module "mschap" returns noop for request 1
modcall: group authorize returns ok for request 1
  rad_check_password:  Found Auth-Type Local
auth: type Local
auth: user supplied User-Password matches local User-Password
Sending Access-Accept of id 252 to <ip_addr_masked>:3745
Finished request 1
Going to the next request
Thread 2 waiting to be assigned a request
--------------</radiusd DEBUG MODE>----------------------------

From the output of the server it looks like the Access is granted but 
the web client complains with the following messages,

-------------<Python Client Side Script>---------------------------
A problem occurred in a Python script. Here is the sequence of function 
calls leading up to the error, in the order they occurred.

 /usr/local/scripts/radius/cgi-bin/authen.py
   27 reply=srv.SendPacket(req)
   28
   29 if reply['ARAP-Security-Data'][0] == randkey:
   30   print open('sentence').read()
   31
reply = {}, randkey = 'eDiylJbp'
 /usr/local/lib/python2.2/site-packages/pyrad/packet.py in 
__getitem__(self={}, key='ARAP-Security-Data')
  156                         return self.data[key]
  157
  158                 values=self.data[self._EncodeKey(key)]
  159                 attr=self.dict.attributes[key]
  160                 res=[]
values undefined, self = {}, self.data = {}, self._EncodeKey = <bound 
method AuthPacket._EncodeKey of {}>, key = 'ARAP-Security-Data'

KeyError: 74
      __doc__ = 'Mapping key not found.'
      __getitem__ = <bound method KeyError.__getitem__ of 
<exceptions.KeyError instance at 0x8209dec>>
      __init__ = <bound method KeyError.__init__ of 
<exceptions.KeyError instance at 0x8209dec>>
      __module__ = 'exceptions'
      __str__ = <bound method KeyError.__str__ of <exceptions.KeyError 
instance at 0x8209dec>>
      args = (74,)
----------------</Python Client Side Script>----------------------

#######END OF OUTPUT###############

I think the client-side script is looking for some additional 
attribute. Is this configurable in freeradius?

Any help would be greatly appreciated.

Cheers,
Anshul
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html